Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/5CA703E065DA11EFAA30692EC4F9AE02.roa
File: 5CA703E065DA11EFAA30692EC4F9AE02.roa (raw, json)
Hash identifier: UIJYCwfwAIOZwQsGvN01LwIEAIVfVX1vYANLGN8rKCo=
Subject key identifier: FC:C8:50:71:5B:98:89:D7:F8:04:C4:87:C6:93:B5:93:D4:D4:83:67
Certificate issuer: /CN=A911CA78/serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6
Certificate serial: 0BB7
Authority key identifier: 40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/5CA703E065DA11EFAA30692EC4F9AE02.roa
Signing time: Thu 29 Aug 2024 07:43:20 +0000
ROA not before: Thu 29 Aug 2024 07:43:20 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 38322
IP address blocks: 42.152.0.0/14 maxlen: 14
42.153.4.0/24 maxlen: 24
42.153.5.0/24 maxlen: 24
42.153.6.0/24 maxlen: 24
42.153.7.0/24 maxlen: 24
42.153.8.0/24 maxlen: 24
42.153.9.0/24 maxlen: 24
42.153.10.0/24 maxlen: 24
42.153.11.0/24 maxlen: 24
42.153.16.0/24 maxlen: 24
42.153.19.0/24 maxlen: 24
42.153.20.0/24 maxlen: 24
42.153.21.0/24 maxlen: 24
42.153.22.0/24 maxlen: 24
42.153.23.0/24 maxlen: 24
42.153.24.0/24 maxlen: 24
42.153.25.0/24 maxlen: 24
42.153.26.0/24 maxlen: 24
42.153.28.0/24 maxlen: 24
42.153.29.0/24 maxlen: 24
42.153.32.0/24 maxlen: 24
42.153.33.0/24 maxlen: 24
42.153.34.0/24 maxlen: 24
42.153.35.0/24 maxlen: 24
42.153.36.0/24 maxlen: 24
42.153.37.0/24 maxlen: 24
42.153.38.0/24 maxlen: 24
42.153.39.0/24 maxlen: 24
42.153.40.0/24 maxlen: 24
42.153.41.0/24 maxlen: 24
42.153.42.0/24 maxlen: 24
42.153.43.0/24 maxlen: 24
42.153.44.0/24 maxlen: 24
42.153.45.0/24 maxlen: 24
42.153.46.0/24 maxlen: 24
42.153.47.0/24 maxlen: 24
42.153.48.0/24 maxlen: 24
42.153.49.0/24 maxlen: 24
42.153.50.0/24 maxlen: 24
42.153.51.0/24 maxlen: 24
42.153.52.0/24 maxlen: 24
42.153.53.0/24 maxlen: 24
42.153.54.0/24 maxlen: 24
42.153.55.0/24 maxlen: 24
42.153.56.0/24 maxlen: 24
42.153.57.0/24 maxlen: 24
42.153.58.0/24 maxlen: 24
42.153.59.0/24 maxlen: 24
42.153.60.0/24 maxlen: 24
42.153.61.0/24 maxlen: 24
42.153.62.0/24 maxlen: 24
42.153.63.0/24 maxlen: 24
42.153.89.0/24 maxlen: 24
42.153.95.0/24 maxlen: 24
42.153.96.0/24 maxlen: 24
42.153.128.0/24 maxlen: 24
42.153.129.0/24 maxlen: 24
42.153.130.0/24 maxlen: 24
42.153.131.0/24 maxlen: 24
42.153.132.0/24 maxlen: 24
42.153.133.0/24 maxlen: 24
42.153.134.0/24 maxlen: 24
42.153.135.0/24 maxlen: 24
42.153.136.0/24 maxlen: 24
42.153.137.0/24 maxlen: 24
42.153.138.0/24 maxlen: 24
42.153.139.0/24 maxlen: 24
42.153.140.0/24 maxlen: 24
42.153.141.0/24 maxlen: 24
42.153.142.0/24 maxlen: 24
42.153.143.0/24 maxlen: 24
42.153.144.0/24 maxlen: 24
42.153.145.0/24 maxlen: 24
42.153.146.0/24 maxlen: 24
42.153.147.0/24 maxlen: 24
42.153.148.0/24 maxlen: 24
42.153.149.0/24 maxlen: 24
42.153.150.0/24 maxlen: 24
42.153.151.0/24 maxlen: 24
42.153.152.0/24 maxlen: 24
42.153.153.0/24 maxlen: 24
42.153.154.0/24 maxlen: 24
42.153.155.0/24 maxlen: 24
42.153.156.0/24 maxlen: 24
42.153.157.0/24 maxlen: 24
42.153.158.0/24 maxlen: 24
42.153.159.0/24 maxlen: 24
42.153.200.0/22 maxlen: 22
42.153.200.0/24 maxlen: 24
42.153.201.0/24 maxlen: 24
42.153.202.0/24 maxlen: 24
42.153.203.0/24 maxlen: 24
42.153.204.0/22 maxlen: 22
42.153.204.0/24 maxlen: 24
42.153.205.0/24 maxlen: 24
42.153.206.0/24 maxlen: 24
42.153.207.0/24 maxlen: 24
122.255.96.0/19 maxlen: 19
2401:3c00::/46 maxlen: 46
2401:3c00:4::/46 maxlen: 46
2401:3c00:8::/46 maxlen: 46
2401:3c00:c::/46 maxlen: 46
2401:3c00:10::/46 maxlen: 46
2401:3c00:14::/46 maxlen: 46
2401:3c00:18::/46 maxlen: 46
2401:3c00:40::/46 maxlen: 46
2401:3c00:44::/46 maxlen: 46
2401:3c00:48::/46 maxlen: 46
2401:3c00:4c::/46 maxlen: 46
2401:3c00:50::/46 maxlen: 46
2401:3c00:54::/46 maxlen: 46
2401:3c00:58::/46 maxlen: 46
2401:3c00:a4::/48 maxlen: 48
2401:3c00:a5::/48 maxlen: 48
2401:3c00:a6::/48 maxlen: 48
2401:3c00:a7::/48 maxlen: 48
2401:3c00:a8::/48 maxlen: 48
2401:3c00:a9::/48 maxlen: 48
2401:3c00:c0::/46 maxlen: 46
2401:3c00:c0:5::/64 maxlen: 64
2401:3c00:c8::/46 maxlen: 46
2401:3c00:cc::/46 maxlen: 46
2401:3c00:d8::/48 maxlen: 48
2401:3c00:d9::/48 maxlen: 48
2401:3c00:da::/48 maxlen: 48
2401:3c00:db::/48 maxlen: 48
2401:3c00:dc::/48 maxlen: 48
2401:3c00:100::/43 maxlen: 43
2401:3c00:120::/43 maxlen: 43
2401:3c00:180::/43 maxlen: 43
2401:3c00:1a0::/43 maxlen: 43
2401:3c00:241::/48 maxlen: 48
2401:3c00:242::/48 maxlen: 48
2401:3c00:243::/48 maxlen: 48
2401:3c00:244::/48 maxlen: 48
2401:3c00:245::/48 maxlen: 48
2401:3c00:246::/48 maxlen: 48
2401:3c00:247::/48 maxlen: 48
2401:3c00:248::/48 maxlen: 48
2401:3c00:249::/48 maxlen: 48
2401:3c00:24a::/48 maxlen: 48
2401:3c00:24b::/48 maxlen: 48
2401:3c00:24c::/48 maxlen: 48
2401:3c00:24d::/48 maxlen: 48
2401:3c00:24e::/48 maxlen: 48
2401:3c00:24f::/48 maxlen: 48
2401:3c00:250::/48 maxlen: 48
2401:3c00:251::/48 maxlen: 48
2401:3c00:252::/48 maxlen: 48
2401:3c00:253::/48 maxlen: 48
2401:3c00:254::/48 maxlen: 48
2401:3c00:255::/48 maxlen: 48
2401:3c00:256::/48 maxlen: 48
2401:3c00:257::/48 maxlen: 48
2401:3c00:258::/48 maxlen: 48
2401:3c00:259::/48 maxlen: 48
2401:3c00:25a::/48 maxlen: 48
2401:3c00:25c::/48 maxlen: 48
2401:3c00:25d::/48 maxlen: 48
2401:3c00:25f::/48 maxlen: 48
2401:3c00:260::/48 maxlen: 48
2401:3c00:261::/48 maxlen: 48
2401:3c00:262::/48 maxlen: 48
2401:3c00:280::/48 maxlen: 48
2401:3c00:281::/48 maxlen: 48
2401:3c00:290::/48 maxlen: 48
2401:3c00:291::/48 maxlen: 48
2401:3c00:292::/48 maxlen: 48
2401:3c00:293::/48 maxlen: 48
2401:3c00:294::/48 maxlen: 48
2401:3c00:295::/48 maxlen: 48
2401:3c00:2a0::/48 maxlen: 48
2401:3c00:2a1::/48 maxlen: 48
2401:3c00:2a2::/48 maxlen: 48
2401:3c00:2a3::/48 maxlen: 48
2401:3c00:2a4::/48 maxlen: 48
2401:3c00:2a5::/48 maxlen: 48
2401:3c00:2b0::/48 maxlen: 48
2401:3c00:2b1::/48 maxlen: 48
2401:3c00:2b2::/48 maxlen: 48
2401:3c00:2b3::/48 maxlen: 48
2401:3c00:2b4::/48 maxlen: 48
2401:3c00:2b5::/48 maxlen: 48
2401:3c00:2c0::/42 maxlen: 42
Validation: Failed, certificate revoked on Wed 11 Sep 2024 16:56:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2999 (0xbb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911CA78/serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6
Validity
Not Before: Aug 29 07:43:20 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=66d02698-57c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:69:3e:02:00:07:82:88:c5:0e:6a:3d:a9:cb:
fa:29:ec:31:c4:d7:f9:98:94:8c:f3:49:66:9e:64:
20:ca:6c:f3:87:e4:86:44:cf:71:96:22:da:65:c5:
2c:44:29:25:57:47:58:4b:1e:74:68:b6:46:af:11:
10:98:1a:70:a8:2f:97:fc:d4:76:aa:84:30:ae:93:
05:69:f0:5b:a7:78:6a:d5:72:30:ac:c0:1b:cd:1a:
06:95:21:b6:fb:bd:9a:bf:a2:21:ca:a9:c6:d0:0a:
66:41:f9:54:06:42:44:8e:d1:46:fd:48:6d:80:81:
a5:fd:52:d8:48:05:fe:71:1f:d1:0c:c6:3b:74:5a:
9b:a7:64:2f:7e:9a:d9:73:a9:d4:17:c5:f7:be:a8:
c7:7b:47:43:96:31:4c:1b:3b:91:1a:fd:01:ab:50:
ea:7c:ea:ed:a0:e0:51:5f:da:d5:1e:f7:98:60:cd:
69:d2:46:a4:2f:78:9d:30:bf:6a:23:c9:fc:38:09:
b5:e1:89:a8:81:6b:71:52:57:75:05:53:0a:71:00:
f9:f2:ee:e5:37:cb:d7:e7:a2:43:e0:75:9d:42:ae:
7a:57:b6:c6:1d:55:5b:42:35:97:59:2f:a2:11:a4:
7d:4b:fd:5a:1c:f9:a5:24:d3:5b:53:6d:bc:cc:2b:
62:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:C8:50:71:5B:98:89:D7:F8:04:C4:87:C6:93:B5:93:D4:D4:83:67
X509v3 Authority Key Identifier:
keyid:40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/5CA703E065DA11EFAA30692EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
42.152.0.0/14
122.255.96.0/19
IPv6:
2401:3c00::-2401:3c00:1b:ffff:ffff:ffff:ffff:ffff
2401:3c00:40::-2401:3c00:5b:ffff:ffff:ffff:ffff:ffff
2401:3c00:a4::-2401:3c00:a9:ffff:ffff:ffff:ffff:ffff
2401:3c00:c0::/46
2401:3c00:c8::/45
2401:3c00:d8::-2401:3c00:dc:ffff:ffff:ffff:ffff:ffff
2401:3c00:100::/42
2401:3c00:180::/42
2401:3c00:241::-2401:3c00:25a:ffff:ffff:ffff:ffff:ffff
2401:3c00:25c::/47
2401:3c00:25f::-2401:3c00:262:ffff:ffff:ffff:ffff:ffff
2401:3c00:280::/47
2401:3c00:290::-2401:3c00:295:ffff:ffff:ffff:ffff:ffff
2401:3c00:2a0::-2401:3c00:2a5:ffff:ffff:ffff:ffff:ffff
2401:3c00:2b0::-2401:3c00:2b5:ffff:ffff:ffff:ffff:ffff
2401:3c00:2c0::/42
Signature Algorithm: sha256WithRSAEncryption
86:bf:c2:be:f5:b5:5d:de:cf:4c:2b:dd:1e:9f:f3:2a:37:bf:
37:57:94:c6:7a:2e:d7:22:4e:48:d1:d0:26:09:9b:9a:5e:2f:
de:64:36:a2:ba:d2:af:37:05:ba:5f:cf:84:9a:78:ff:83:de:
0a:1b:18:b2:6d:31:93:2c:30:95:c3:6c:cb:08:0c:b7:20:f4:
98:79:ad:6d:a7:2a:8a:dc:c6:77:52:b8:ce:4b:37:72:61:b2:
cb:26:ee:bf:67:9d:e4:7e:92:c0:c4:65:2d:5c:eb:f5:27:28:
a9:03:7c:a1:01:68:a9:86:b2:bd:89:24:54:5b:c7:5f:fb:77:
f3:36:82:31:ac:06:03:32:c2:10:b1:85:7e:05:1a:c7:8e:ed:
32:1c:46:a5:b3:b6:e8:12:3d:a9:21:48:77:17:a6:8b:dc:9b:
7a:57:ee:f8:9a:27:3c:c7:52:52:d9:7e:63:08:51:8a:c1:41:
1f:ea:a8:6e:6f:30:4d:19:2a:06:5b:4d:0e:41:96:42:3d:c5:
45:a2:9f:23:b5:09:a7:fc:66:5e:2d:e3:91:04:9e:aa:34:d3:
47:fa:d0:6b:1f:22:d8:8e:9c:9b:78:2b:75:aa:9e:ca:97:0c:
33:8f:89:55:be:e1:8b:26:14:4a:ac:75:95:cf:cb:4a:63:a6:
e8:49:be:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 11 18:35:54 2024 by rpki-client on console-ams.rpki-client.org